Improper Authentication Vulnerability in Rockwell Automation's 1794-AENTR Adapter

CVE-2026-0647

What is CVE-2026-0647?

An improper authentication security issue has been identified in Rockwell Automation's 1794-AENTR adapter, specifically within its embedded web server. This vulnerability allows attackers to exploit the system by sending specially crafted HTTP GET requests to a designated endpoint, enabling unauthorized modification of the device's web interface password without any authentication requirements. If successfully exploited, this could result in unauthorized access to the device, potential account takeover, and compromise of the availability of the embedded web server.

References